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WO 99/16244 PCT/IB98/01S11 
METHOD AND APPARATUS FOR RECORDING OF ENCRYPTED DIGITAL DATA 



The present invention relates to a method and apparatus for recording scrambled digital data, for 
example television broadcasts. 

5 

Transmission of encrypted data is well-known in the field of pay TV systems, where scrambled 
audiovisual information is broadcast typically by satellite to a number of subscribers, each subscriber 
possessing a decoder or receiver/decoder capable of descrambling the transmitted program for 
subsequent viewing. 

10 

In a typical system, scrambled digital data is transmitted together with a control word for descrambling 
of the digital data, the control word itself being encrypted by a first key and transmitted in encrypted 
form, the scrambled digital data and encrypted code word being received by a decoder possessing an 
equivalent of the first key necessary to decrypt the encrypted code word and thereafter descramble the 
15 transmitted data, the decoder being further adapted to pass the digital data in its still scrambled form to 
a digital recording device. A paid-up subscriber will receive on a monthly basis the key necessary to 
decrypt the encrypted control word so as to permit viewing of a particular program. 

With the advent of digital technology, the quality of the transmitted data has increased many times 
20 over. A particular problem associated with digital quality data lies in its ease of reproduction. Where a 
descrambled program is passed via an analogue link (e.g. the " Peritel " link) for viewing and recording 
by a standard VCR the quality remains no greater than that associated with a standard analogue 
cassette recording. The risk that such a recording may be used as a master tape to make pirate 
copies is thus no greater than with a standard shop bought analogue cassette. 

25 

By way of contrast, any descrambled digital data passed by a direct digital link to one of the new 
generation of digital recording devices (for example, a DVHS recorder) will be of the same quality as 
the originally transmitted program and may thus be reproduced any number of times without any 
degradation of image or sound quality. There is therefore a considerable risk that the descrambled 
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data will be used as a master recording to make pirate copies, either further digital copies or even 
simple analogue VHS copies. 



French Patent Application 95 03859 shows one of overcoming this problem, by means of a system in 
5 which descrambled digital data is never allowed to be recorded on the digital recording medium. 
Instead, the decoder described in this application records the data in its scrambled form on the 
recording medium, together with the control word necessary to descramble the data re-encrypted by 
means of another key. This new key is known only to the receiver/decoder and replaces the first key 
needed to obtain the code word for viewing of the program. 

10 

The advantage of such a system is that the data is never stored in a " clear " form and cannot be 
viewed without possession of the new key, stored in the receiver/decoder. The system also 
possesses the advantage that, since the first key changes on a monthly basis, the use of a constant 
key to re-encrypt the control word registered on the digital tape means that the receiver/decoder will 
15 still be able to decrypt the control word recorded on the tape even after the end of a subscription 
month. 

The disadvantage of the system proposed in this patent application is that the recording can only be 
viewed in conjunction with that particular receiver/decoder. If that decoder breaks down, or is 
20 replaced, the recording can no longer be replayed. Equally, it is not possible to play the recording 
directly in a digital recorder without connecting the receiver/decoder in the system and a viewer must 
therefore maintain his subscription with the pay TV company in order to keep the decoder so as to be 
capable of viewing films already transmitted. 

25 It is an object of the present invention to overcome the problems associated with this solution whilst 
keeping enabling secure recording of digital data that cannot be easily used to generate pirate copies 
of the transmitted data. 
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The present invention comprises a method for transmission and recording of encrypted digital 
information in which digital information is encrypted by a first key and transmitted in encrypted form, 
the encrypted information being received by a decoder having access to an equivalent of the first key 
necessary to decrypt the information and characterised in that the decrypted information is thereafter 
5 re-encrypted by means of a second key stored in a portable support device adapted to be received by 
the decoder or an associated digital recorder, the re-encrypted information being thereafter recorded 
on the digital recording medium by the digital recorder. 

In this way, the present invention overcomes the problems of the prior art since the subsequent re- 
10 playing of the recorded data becomes independant of the identity of the decoder. When replaying the 
recording, the information is decrypted by means of the second key stored on the support means. 

Replacement of the decoder will not invalidate the recording in question as long as the new decoder 
has a receptacle for receiving the support device containing the second key. If supplied with an 
15 appropriate reader, the digital recorder may itself read the second key and permit replaying of the 
information without the need for the decoder. Unlike the decoder, which is a relatively complex piece 
of equipment which may easily break down, the portable support device may be implemented in a 
simple resistant form. 

20 The information re-encrypted by the second key and stored on the digital recording medium may 
correspond simply to audiovisual information. However, in a preferred embodiment, the digital 
information corresponds to a control word for descrambiing scrambled digital data, the scrambled 
digital data being transmitted together with the control word as encrypted by the first key, the control 
word being thereafter decrypted by the equivalent first key and re-encrypted by the second key, and 

25 the re-encrypted control word and scrambled data then being recorded on the digital recording 
medium. 

In a particularly preferred embodiment the portable support device is a smart card adapted to be 
received in a smart card reader in the decoder and/or digital recorder. In this application the term 
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" smart card " is used to mean any conventional chip-based card device possessing, for example, 
microprocessor or EEPROM memory for stocking the second key algorithm. Also included in this term 
are chip devices having alternative physical forms, for example key-shaped devices such as are often 
used in TV decoder systems. 

5 

In one embodiment, the smart card also contains the equivalent of the first key used to decrypt the 
control word for the initial descrambling of the data, eg for viewing in the case of a television broadcast 
system. In such a case, the smart card forms part of the pay TV system and may also contain a 
personalised key known to the transmitter to enable the transmitter to selectively identify which 
10 subscribers will receive an updated first key at the end of the month. 

In an alternative embodiment, the second key is stored on a smart card different from that used to 
store the first key. In such an embodiment, reading of the information stored on the digital medium 
thus becomes completely separate from the subscriber system and, even after a subscriber has 
15 withdrawn from the system and his subscription card withdrawn, he may continue to watch previously 
recorded films provided the digital recorder/player that he possesses is adapted to read the 
accompanying smart card. 

In such a system, a single smart card and second key may be used to generate the re-encrypted code 
20 word for a plurality of recordings. In such a way, a single " library card " can be used to decrypt any 
number of recordings. 

In one embodiment, the smart card may also contain a number of credit units to determine how many 
times the recording may be replayed, the number of units being decremented with each subsequent 
25 partial or complete playing of the recording. These credit units may be downloaded in a message 
together with the transmitted first key, for example. 



In one embodiment the credit units are associated with a particular segment of the recording such that 
playing a section of the recording, for example the first or last quarter hour of the recording will 
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decrement certain credit units associated with these sections. Alternatively, the credit units are of a 
single type and are decremented with the playing of any section of the recording. 



As discussed above, the present invention is particularly applicable to the case where the second key 
5 algorithm is stored on a smart card associated with the recording medium. However, in an alternative 
embodiment, the portable support is defined by the recording itself, the second key being stored in an 
integrated circuit embedded in the housing of the digital recording medium. 

Such a technique has already been suggested, for example, in the case of DVHS cassettes where a 
10 set of metallic contacts may be provided on an exterior surface of the cassette housing, the contacts 
leading to an electronic circuit, such as an integrated circuit or chip in the interior of the housing. 
These contacts may be engaged by a corresponding set of contacts in the receptacle of the recorder 
to enable communication between the integrated circuit and the video recorder. 

15 In such systems, security is still provided despite the fact that the key is carried with the recording, 
since the key may not easily be copied from within the embedded chip. The variations described 
above with regard to the smart card embodiments are equally applicable to systems in which the 
support is defined by the recording housing. 

20 The present invention is particularly applicable to a method in which the scrambled data represents 
audiovisual data transmitted in a scrambled television broadcast. 

The present invention has been described above in relation to a method but applies equally to an 
apparatus. 

25 

The terms " scrambled " and " encrypted " and " control word " and " key " have been used here for the 
purpose of clarity of language. However, it will be understood that no fundamental distinction is to be 
made between " scrambled data " and " encrypted data " or between a " control word " and a " key ". 
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Similarly, whilst the description refers to " receiver/decoders " and " decoders " it will be understood 
that the present invention applies equally to embodiments having a receiver integrated with the 
decoder as to a decoder unit functioning in combination with a physically separate receiver. The 
invention equally extends to embodiments in which the decoder is integrated with other devices, such 
5 as televisions or even digital video recorders. 

A preferred embodiment of the invention will now be described by way of example only and in relation 
to the attached figures, in which : 

10 Figure 1 shows the overall architecture of a digital television system, as may be adapted by the 
present invention to interact with a digital recording device ; 

Figure 2 shows the conditional access system of the television system of Figure 1 ; 

15 Figure 3 shows the different levels of encryptage in the television system ; 

Figure 4 shows the structure of a transmitted digital packet in the television system, including visual, 
audio and teletext data and an ECM message component ; 

20 Figure 5 shows a first embodiment of the invention including a digital recording device and a smart 
card containing a second algorithm used to encrypt the code word to be registered on a digital video 
cassette ; 

Figure 6 shows a second embodiment of the invention in which the smart card contains both the first 
25 and second keys necessary for viewing the transmitted and recorded program, respectively, together 
with credit units for determining the number of times a program may be watched ; and 

Figure 7 shows a third embodiment of the invention in which the second key is stored on an integrated 
circuit mounted in the casing of the digital video cassette. 
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Digital Television System 

An overview of a digital television broadcast and reception system 1000 adaptable to the present 
5 invention is shown in Figure 1 . The system includes a mostly conventional digital television system 
2000 which uses the known MPEG-2 compression system to transmit compressed digital signals. In 
more detail, the MPEG-2 compressor 2002 in a broadcast centre receives a digital signal stream 
(typically a stream of video signals). The compressor 2002 is connected to a multiplexer and scrambler 
2004 by linkage 2006. The multiplexer 2004 receives a plurality of further input signals, assembles one 
10 or more transport streams and transmits compressed digital signals to a transmitter 2008 of the 
broadcast centre via linkage 2010, which can of course take a wide variety of forms including telecom 
links. The transmitter 2008 transmits electromagnetic signals via uplink 2012 towards a satellite 
transponder 2014, where they are electronically processed and broadcast via notional downlink 2016 
to earth receiver 2018, conventionally in the form of a dish owned or rented by the end user. The 
15 signals received by receiver 2018 are transmitted to an integrated receiver/decoder 2020 owned or 
rented by the end user and connected to the end user's television 2022. The receiver/decoder 2020 
decodes the compressed MPEG-2 signal into a television signal for the television set 2022. 

A conditional access system 3000 is connected to the multiplexer 2004 and the receiver/decoder 2020, 
20 and is located partly in the broadcast centre and partly in the decoder. It enables the end user to 
access digital television broadcasts from one or more broadcast suppliers. A smartcard, capable of 
decrypting messages relating to commercial offers (that is, on or several television programmes sold 
by the broadcast supplier), can be inserted into the receiver/decoder 2020. Using the decoder 2020 
and smartcard, the end user may purchase events in either a subscripion mode or a pay-per-view- 
25 mode. 

An interactive system 4000, also connected to the multiplexer 2004 and the receiver/decoder 2020 and 
again located partly in the broadcast and partly in the decoder, enables the end user to interact with 
various applications via a modemmed back channel 4002. 
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Conditional Access System 

With reference to Figure 2, the conditional access system 3000 includes a Subscriber Authorization 
5 System (SAS) 3002. The SAS 3002 is connected to one or more Subscriber Management Systems 
(SMS) 3004, one SMS for each broadcast supplier, by a respective TCP-IP link 3006 (although other 
types of linkage could alternatively be used). Alternatively, one SMS could be shared between two 
broadcast suppliers, or one supplier could use two SMSs, and so on. 

10 First encrypting units in the form of ciphering units 3008 utilising "mother" smartcards 3010 are 
connected to the SAS by linkage 3012. Second encrypting units again in the form of ciphering units 
3014 utilising mother smartcards 3016 are connected to the mutliplexer 2004 by linkage 3018. The 
receiver/decoder 2020 receives a " daughter " smartcard 3020. It is connected directly to the SAS 
3002 by Communications Servers 3022 via the modemmed back channel 4002. The SAS sends 

15 amongst other things subscription rights to the daughter smartcard on request. 

The smartcards contain the secrets of one or more commercial operators. The " mother " smartcard 
encrypts different kinds of messages and the " daughter " smartcards decrypt the messages, if they 
have the rights to do so. 

20 

The first and second ciphering units 3008 and 3014 comprise a rack, an electronic VME card with 
software stored on an EEPROM, up to 20 electronic cards and one smartcard 3010 and 3016 
respectively, for each electronic card, one (card 3016) for encrypting the ECMs and one (card 3010) 
for encrypting the EMMS. 

25 

As will be described, ECMs or Entitlement Control Messages are encrypted messages embedded in 
the data stream of a transmitted program and which contain the control word necessary for 
descrambling of a program. Authorisation of a given receiver/decoder is controlled by EMMs or 
Entitlement Management Messages, transmitted on a less frequent basis, for example every month, 
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and which supply an authorized receiver/decoder with the key necessary to decode the ECM. 



The operation of the conditional access system 3000 of the digital television system will now be 
described in more detail with reference to the various components of the television system 2000 and 
5 the conditional access system 3000. 

Multiplexer and Scrambler 

With reference to Figures 1 and 2, in the broadcast centre, the digital video signal is first compressed 
10 (or bit rate reduced), using the MPEG-2 compressor 2002. This compressed signal is then transmitted 
to the multiplexer and scrambler 2004 via the linkage 2006 in order to be multiplexed with other data, 
such as other compressed data. 

The scrambler generates a control word Ce used in the scrambling process and included in the 
15 MPEG-2 stream in the multiplexer 2004. The control word Ce is generated internally and enables the 
end user's integrated receiver/decoder 2020 to descramble the programme. Access criteria, 
indicating how the programme is commercialised, are also added to the MPEG-2 stream. The 
programme may be commercialised in either one of a number of " subscription " modes and/or one of 
a number of " Pay Per View " (PPV) modes or events. In the subscription mode, the end user 
20 subscribes to one or more commercial offers, of " bouquets ", thus getting the rights to watch every 
channel inside those bouquets. In the preferred embodiment, up to 960 commercial offers may be 
selected from a bouquet of channels. In the Pay Per View mode, the end user is provided with the 
capability to purchase events as he wishes. This can be achieved by either pre-booking the event in 
advance (" pre-book mode "), or by purchasing the event as soon as it is broadcast (" impulse mode "). 

25 

Both the control word Ce and the access criteria are used to build an Entitlement Control Message 
(ECM); this is a message sent in relation with one scrambled program; the message contains a control 
word (which allows for the descrambling of the program) and the access criteria of the broadcast 
program. The access criteria and control word are transmitted to the second encrypting unit 3014 via 
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the linkage 3018. In this unit an ECM is generated, encrypted with a first key Cex and transmitted on to 
the multiplexer and scrambler 2004. 



Each service broadcast by a broadcast supplier in a data comprises a number of distinct components; 
5 for example a television programme includes a video component V, an audio component S, a sub-title 
or teletext component T and so on (see figure 4). Each of these components of a service is individually 
scrambled and encrypted for subsequent broadcast to the transponder 2014. In respect of each 
scrambled component of the service, a separate ECM is required. 

10 Programme Transmission 

The multiplexer 2004 receives electrical signals comprising encrypted EMMs from the SAS 3002, 
encrypted ECMs from the second encrypting unit 3014 and compressed programmes from the 
compressor 2002. The multiplexer 2004 scrambles the programmes and transmits the scrambled 
15 programmes, the encrypted EMM (if present) and the encryped ECMs as electric signals to a 
transmitter 2008 of the broadcast centre via linkage 2010. The transmitter 2008 transmits 
electromagnetic signals towards the satellite transponder 2014 via uplink 2012. 

Programme Reception 

20 

The satellite transponder 2014 receives and processes the electromagnetic signals transmitted by the 
transmitter 2008 and transmits the signals on to the earth receiver 2018, conventionally in the form of a 
dish owned or rented by the end user, via downlink 2016. The signals received by receiver 2018 are 
transmitted to the integrated receiver/decoder 2020 owned or rented by the end user and connected to 
25 the end user's television set 2022. The receiver/decoder 2020 demultiplexes the signals to obtain 
scrambled programmes with encrypted EMMs and encrypted ECMs. 

If the programme is not scrambled the receiver/decoder 2020 decompresses the data and transforms 
the signal into a video signal for transmission to television set 2022. 
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If the programme is scrambled, the receiver/decoder 2020 extracts the corresponding ECM from the 
MPEG-2 stream and passes the ECM to the " daughter " smartcard 3020 of the end user. This slots 
into a housing in the receiver/decoder 2020. The daughter smartcard 3020 controls whether the end 
5 user has the right to decrypt the ECM and to access the programme. 

If the user does not have the necessary rights, a negative status is passed to the receiver/decoder 
2020 to indicate that the programme cannot be descrambled. If the end user does have the rights, the 
ECM is decrypted and the control word extracted. The decoder 2020 can then descramble the 
10 programme using this control word. The MPEG-2 stream is decompressed and translated into a video 
signal onward transmission to television set 2022. 

The levels of encryption used will be described in more detail in relation to Figure 3 below. 

15 Subscriber Management System (SMS) 

A subscriber Management System (SMS) 3004 includes a database 3024 which manages, amongst 
others, all of the end user files, commercial offers (such as tariffs and promotions), subscriptions, PPV 
details, and data regarding end user consumption and authorization. The SMS may be physically 
20 remote from the SAS 

Each SMS 3004 transmits messages to the SAS 3002 via respective linkage 3006 to enable 
modifications to or creations of Entitlement Management Messages (EMMs) to be transmitted to end 
users. 

25 

The SMS 3004 also transmits messages to the SAS 3002 which imply no modifications or creations of 
EMMs but imply only a change in an end users's state (relating to the authorization granted to the end 
user when ordering products or to the amount that the end user will be charged). 
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Entitlement Management Messages (EMMs) 
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The EMM is a message dedicated to an individual end user (subscriber), or a group of end users (in 
contrast with an ECM, which is dedicated to one scrambled programme only or a set of scrambled 
5 programmes if part of the same commercial offer). A group may contain a given number of end users. 
This organisation as a group aims at optimising the bandwitdth; that is, access to one group can permit 
the reaching of a great number of end users. 

Various specific types of EMM are used in putting the present invention into practice. Individual EMMs 
10 are dedicated to individual subscribers, and are typically used in the provision of Pay Per View 
services; these contain the group identifier and the position of the subscriber in that group. So-called 
" Group " subscription EMMs are dedicated to groups of, say, 256 individual users, and are typically 
used in the administration of some subscription services. This EMM has a group identifier and a 
subscribers' group bitmap. Audience EMMs are dedicated to entire audiences, and might for example 
15 be used by a particular operator to provide certain free services. An " audience " is the totality of 
subscribers having smartcards which bear the same Operator Identifier (OPI). Finally, a " unique " 
EMM is addressed to the unique identifier of the smartcard. 

Encryption Levels of the System 

20 

Referring now to Figure 3, the encryption levels in the broadcast system will now be described. The 
stages of encryption associated with the broadcast of the digital data are shown at 4001, the 
transmission channel (eg a satellite link as described above) at 4002 and the stages of decryption at 
the receiver at 4003. 

25 

The digital data N is scrambled by a control word Ce before being transmitted to a multiplexer Mp for 
subsequent transmission. As will be seen from Figure 4, the transmitted data includes an ECM 
comprising, inter alia, the control word Ce as encrypted by an encrypter Ch1 controlled by a first 
encryption key Cex. At the receiver/decoder, the signal passes by a demultiplexer DMp and 
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descrambler D before being passed to a television 2022 for viewing. A decryption unit DCh1 also 
possessing the key Cex decrypts the ECM in the demultiplexed signal to obtain the control word Ce 
subsequently used to descramble the signal. 

5 For security reasons, the control word Ce embedded in the encrypted ECM changes on average every 
10 seconds or so. In contrast, the first encryption key Cex used by the receiver to decode the ECM is 
changed every month or so by means of an EMM. The encryption key Cex is encrypted by a second 
unit ChP using a personalised key Cg corresponding to the identity of the decoder. If the decoder is 
one of those chosen to receive an updated key Cex, a decryption unit DChP in the decoder will decrypt 

10 the message using its key Cg to obtain that month's key Cex. 

The decryption units DChp and DCh1 and the associated keys are held on a smart card provided to 
the subscriber and inserted in a smart card reader in the decoder. The keys may generated according 
to any known symmetric key algorithm, such as DES. Alternative embodiments using public/private 
15 key algorithms are equally possible. 

Recording of Digital Data 

As set out in the introduction, it is inadvisable for descrambled digital data to be permitted to be 
20 recorded in view of the risks that arise in relation to unauthorised copying and piracy. As shown in 
Figure 5, the present invention provides a means for overcoming this problem. 

The system comprises a smart card 4004, insertable in a smart card slot in the receiver/decoder, 
together with a digital recorder 4005, eg a DVHS recorder, including a digital recording medium 4006, 
25 such as a DVHS cassette. 

In this embodiment, the received control word is decrypted by the associated smart card 3020 inserted 
in the decoder (see Figure 2). The decoded control word Ce (together with any other data that forms 
the ECM, such as access control information etc) is then passed to the microprocessor embedded in 
30 the smart card 4004. Using a second encryption key C2 and second encryption algorithm Ch2, the 
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smart card 4004 generates a new ECM, indicated as ECM' in the figure. This entitlement message 
ECM' is then used to replace the ECM in the scrambled data stream from the demultiplexer DMp as 
shown at 4007 and the combination of scrambled data and new entitlement message ECM' are 
recorded on the DVHS cassette 4006. The entitlement message ECM' may be inserted in the data 
5 stream circulating a shift control register R. 

By this means, the invention avoids recording decoded audiovisual information on the cassette. In 
order to play the cassette, the card is reinserted in the decoder, the key C2 is used to decode the 
entitlement message ECM', and the subsequently extracted control word Ce used to control the 
1 0 decoder to descramble the program for viewing. 

In the system shown in Figure 5 the smart card 4004 is different from the smart card 3020 shown in 
Figure 2 of the television system and which contains the encryption keys necessary for viewing of the 
program. However, in the alternative embodiment shown in Figure 6, the smart card 3020 contains 
15 both the first and second encryption keys Cex and C2 needed for viewing and recording the program. 
As represented, the key Cex controls the decryption of the ECM to generate the control word Ce used 
by the descrambler D to view the program and subsequently encrypted by the key C2 to form the new 
entitlement message ECM'. 

20 The algorithms DCh1 and DCh2 have not been shown for reasons of space. The card 3020 is in fact 
usually also initialised with the personalised key Cg (not shown) enabling the decryption of EMMs so 
as to obtain that month's key Cex stored in the memory of the card. Although the smart card has been 
shown in the form of a substantially rectangular card, other physical forms, such as key shapes etc, 
are of course possible. 

25 

The ECM transmitted with the programme and decrypted by the card may also contain credit units U 
subsequently stored in the card and which control the number of times a recorded film may be viewed. 
In the simplest embodiment, the credit units may be decremented during the replaying of the recorded 
film every time an ECM' passes by the decoder. Once the number of credits has been decremented to 
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zero, indicating the recording has been viewed a predetermined number of times, a message is sent to 
the decoder to prevent further viewings of the film, unless the credit units are recharged (by, for 
example, a charging instruction sent in an EMM). 

5 In alternative embodiments, the credit units may be decremented every ten or hundred ECM' 
messages. In still further realisations, the credit units may correspond to certain sections of the film 
(for example the first or last 10 minutes of the film), such that playing these sections will decrement the 
credit units associated therewith. The sections can be identified by tagging the ECM' messages in 
these sections accordingly. 

10 

A further embodiment of the invention is shown in Figure 7. In this embodiment, the generation of the 
new entitlement message EMM' is controlled by an integrated circuit or chip 4008 possessing the 
second encryption key C2 and embedded in the casing of the recorded cassette 4006. Incorporation 
of a microprocessor within the housing of the recording medium is a known technique and has been 
15 suggested for example in the case of DVHS cassettes. In this example, a set of metallic contacts may 
be provided on an exterior surface of the cassette housing, the contacts leading to an electronic circuit, 
such as an integrated circuit or chip in the interior of the housing. These contacts may be engaged by 
a corresponding set of contacts in the receptacle of the recorder to enable communication between the 
integrated circuit and the video recorder. 

20 

As will be appreciated, whilst it is straightforward to copy the recorded (and scrambled) digital data, the 
data stored in the chip will be resistant to copying and, as with the previous embodiments, the 
scrambled data will be useless without the key C2 necessary to unlock the ECM' to obtain the control 
word used by the descrambler. 

25 

As will be understood, in all embodiments described, the elements of the receiver/decoder and the 
digital recording device may be combined or interchanged, such that the digital recorder possesses a 
smart card slot for receiving a smart card, for example, and/or the necessary elements to descramble 
the program once the control word Ce has been extracted from the ECM' message. The decoder 
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and/or digital recorder may equally be integrated together with other devices, such as a television for 
example. 
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CLAIMS 

5 1 . A method for transmission and recording of encrypted digital information in which digital information 
is encrypted by a first key and transmitted in encrypted form, the encrypted information being received 
by a decoder having access to an equivalent of the first key necessary to decrypt the information and 
characterised in that the decrypted information is thereafter re-encrypted by means of a second key 
stored in a portable support device adapted to be received by the decoder or an associated digital 

10 recorder, the re-encrypted information being thereafter recorded on the digital recording medium by 
the digital recorder. 

2. A method as claimed in Claim 1 in which the digital information corresponds to a control word for 
descrambling scrambled digital data, the scrambled digital data being transmitted together with the 

15 control word as encrypted by the first key, the control word being thereafter decrypted by the 
equivalent first key and re-encrypted by the second key, and the re-encrypted control word and 
scrambled data then being recorded on the digital recording medium. 

3. A method as claimed in claim 1 or 2 in which the portable support device is a smart card adapted to 
20 be received in a smart card reader in the decoder and/or digital recorder. 

4. A method as claimed in claim 3 in which the smart card also contains the equivalent of the first key 
used to decrypt the control word for the initial descrambling of the data. 

25 5. A method as claimed in claim 3 in which the second key is stored on a smart card different from the 
means used by the decoder to store the first key. 

6. A method as claimed in any of claims 3 to 5 in which a single smart card and second key are used 
to generate the re-encrypted code word for a plurality of recordings. 
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7. A method as claimed in any of claims 3 to 6 in which the smart card also contains a number of 
credit units to determine how many times the recording may be replayed, the number of units being 
decremented with each subsequent partial or complete playing of the recording. 

5 

8. A method as claimed in claim 7 in which the credit units are associated with a particular segment of 
the recording such that playing a section of the recording decrements certain credits associated with 
that section. 

10 9. A method as claimed in claim 8 in which the credit units are of a single type and are decremented 
with the playing of any section of the recording. 

10. A method as claimed in claim 1 in which the portable support is defined by the recording medium 
itself, the second key being stored in an integrated circuit embedded in the housing of the digital 

15 recording medium. 

11. An apparatus adapted for transmission and recording of scrambled digital data as claimed in any 
of claims 1 to 10 comprising a transmitter for encrypting with a first key digital information and 
transmitting said information in encrypted form, a decoder for receiving the encrypted information and 

20 having access to an equivalent of the first key necessary to decrypt the information, and a portable 
support device adapted to be received by the decoder or an associated digital recorder and 
possessing a second key for re-encrypting the decrypted information for subsequent transmittal to a 
digital recording device for recordal on a digital recording medium. 

25 12. A decoder for the apparatus of claim 1 1 and adapted for use in the method of any of claims 1 to 1 0 
including a receptacle for receiving a portable support device possessing a second key for re- 
encrypting the decrypted information. 
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13. A decoder as claimed in claim 12 integrated with a digital recording device for recording the re- 
encrypted information on a digital recording medium. 
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Fig.2. 
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Fig.5. 
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Fig.6. 
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